[strongSwan] Push route possible?

Noel Kuntze noel at familie-kuntze.de
Wed Feb 10 15:37:42 CET 2016

Hello Michael,

On 10.02.2016 13:25, Michael Schwartzkopff wrote:
> Is it somehow possible to inform my local VPN gateway about the actual network 
> that is configured behind my remote gateway during phase 1?
The subnets are negotiated in phase two, when the CHILD_SAs are negotiated.

> Is it somehow possible to add the dynamic network to my righsubnet on my local gateway?
Just configure ::/0 and use IKEv2 traffic selector narrowing. You obviously still have to configure the
correct subnet on your remote side. How you do that is up to you.


Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160210/7f118fe6/attachment.pgp>

More information about the Users mailing list